• DocumentCode
    16960
  • Title

    Securing software defined networks: taxonomy, requirements, and open issues

  • Author

    Akhunzada, Adnan ; Ahmed, Ejaz ; Gani, Abdullah ; Khan, Muhammad ; Imran, Muhammad ; Guizani, Sghaier

  • Volume
    53
  • Issue
    4
  • fYear
    2015
  • fDate
    Apr-15
  • Firstpage
    36
  • Lastpage
    44
  • Abstract
    The emergence of SDNs promises to dramatically simplify network management and enable innovation through network programmability. Despite all the hype surrounding SDNs, exploiting its full potential is demanding. Security is still the key concern and is an equally striking challenge that reduces the growth of SDNs. Moreover, the deployment of novel entities and the introduction of several architectural components of SDNs pose new security threats and vulnerabilities. Besides, the landscape of digital threats and cyber-attacks is evolving tremendously, considering SDNs as a potential target to have even more devastating effects than using simple networks. Security is not considered as part of the initial SDN design; therefore, it must be raised on the agenda. This article discusses the state-of-the-art security solutions proposed to secure SDNs. We classify the security solutions in the literature by presenting a thematic taxonomy based on SDN layers/interfaces, security measures, simulation environments, and security objectives. Moreover, the article points out the possible attacks and threat vectors targeting different layers/interfaces of SDNs. The potential requirements and their key enablers for securing SDNs are also identified and presented. Also, the article gives great guidance for secure and dependable SDNs. Finally, we discuss open issues and challenges of SDN security that may be deemed appropriate to be tackled by researchers and professionals in the future.
  • Keywords
    computer network security; software defined networking; SDN security; cyber-attacks; digital threats; network management; network programmability; security threats; software defined networks; thematic taxonomy; Computer architecture; Control systems; Network security; Operating systems; Software radio; Telecommunication network management;
  • fLanguage
    English
  • Journal_Title
    Communications Magazine, IEEE
  • Publisher
    ieee
  • ISSN
    0163-6804
  • Type

    jour

  • DOI
    10.1109/MCOM.2015.7081073
  • Filename
    7081073